Risk Management

Legal and Regulatory Register Template

A legal and regulatory register template defining the register of applicable laws, regulations and contractual obligations with owners and compliance status, aligned to ISO 27001, GDPR, SOC 2.

14-20 pages|Updated 2026-09-12|3 frameworks

What's Included

1. Purpose & Scope

What the register is for.

PurposeScopeApproval

2. Obligation Identification

Finding what applies.

JurisdictionsSector RegulationContractual ObligationsIdentification Sources

3. Register Content

What each entry records.

Obligation ReferenceRequirement SummaryApplicabilityOwner

4. Compliance Status

Where the organisation stands.

Status RatingSupporting EvidenceGap DescriptionRemediation Reference

5. Monitoring for Change

Law changes and the register must too.

Horizon ScanningChange TriggersImpact Assessment

6. Review

Cadence.

Scheduled ReviewAnnual Approval

Frequently Asked Questions

What should a legal and regulatory register template include?

A comprehensive legal and regulatory register template should include purpose & scope, obligation identification, register content, compliance status, and more. This template covers 6 key sections aligned to ISO 27001, GDPR, SOC 2 requirements.

Which frameworks require a risk management policy?

Major frameworks requiring risk management policies include ISO 27001, GDPR, SOC 2. This template maps directly to their control requirements, making it easier to demonstrate compliance across multiple standards.

How often should a legal and regulatory register template be reviewed?

Best practice is to review your legal and regulatory register template at least annually, or whenever significant changes occur in your organisation, technology environment, or regulatory landscape. Most frameworks including ISO 27001 and NIST CSF require documented policy review cycles.

Build Your Compliance Programme

Pair this policy template with our compliance platform to map controls across 686+ frameworks, run self-assessments, and get AI-powered compliance advisory.

Get Started Free →

Free forever — no credit card required